1VOMS-PROXY-INIT(1) VOMS-PROXY-INIT(1)
2
6 voms-proxy-init - create a proxy with VOMS extensions
7
9 voms-proxy-init [options]
10
13 The voms-proxy-init generates a proxy with the VOMS information includ‐
14 ed in a non critical extension.
15
18 Options may be specified indifferently with either a "-" or "--" pre‐
19 fix. The options from -help to -out are present for compatibility with
20 grid-proxy-init, and have the exact same meaning. The meaning of the
21 other ones is the following.
22 -help
25 -usage Displays usage
28 -version
31 Displays version
34 -debug Enables extra debug output
37 -quiet
40 -q Quiet mode, minimal output
43 -verify Verifies proxy
46 -pwstdin Allows passphrase from stdin
49 -limited Creates a limited proxy
52 -hours H Proxy is valid for H hours (default:12) This option is depre‐
55 cated and is only present for compatibility with grid-proxy-init, since
56 this option does not set the validity of the credentials returned by
57 VOMS. Use -valid instead.
58 -vomslife H Tries to get a pseudo cert with information valid for H
61 hours. The default is "as long as the proxy certificate". The special
62 value 0 means as long as the server will allow. This option is depre‐
63 cated, since it does not set the validity of the generated proxy. Use
64 -valid instead.
65 -valid HH:MM This option attempts to set the validity for both the
68 proxy and the credentials returned by the VOMS server. The latter va‐
69 lidity may however be shortened due to server policy. This option obso‐
70 letes both -hours and -vomslife, and should be used in preference to
71 both
72 -bits B Number of bits in key {0|512|1024|2048|4096}. 0 is a special
75 value which means: same number of bits as in the issuing certificate.
76 -cert certfile Non-standard location of user certificate
79 -key keyfile Non-standard location of user key
82 -certdir certdir Non standard location where the trusted CAs certifi‐
85 cates are kept.
86 -out proxyfile Location of new proxy cert
89 -voms voms[:command] Specifies the VOMS server to contact using the
92 nickname voms. It also allows to send a specific command to the server.
93 The default command is :all, and it gets all group membership informa‐
94 tion. Other commands are :/Role=rolename which grants the rolename
95 VO-wide role if the server allows it, and :/group/Role=rolename which
96 grants the role rolename only in the group /group, again only if the
97 server allows it.
98 Example : voms-proxy-init --voms myVO:/myVO/Role=VO-Admin
101 -order fqan Specified fqans, if present, are put on top of the list of
104 attributes returned by the server in the order in which they are passed
105 (using more -order call). The order of the others is not specified. If
106 some of the fqans are not returned no warning is given. Capability se‐
107 lection is not supported.
108 -include file Includes file in the certificate (in a non critical ex‐
111 tension)
112 -conf file Read options from file.
115 -confile file
118 -userconf file
121 -vomses file Specifies the name of a configuration file from which a
124 list of nicknames is read. The format of the file is the following:
125 nick host port subject vo where nick is the nickname, host and port
126 are the hostname and port of the server to contact, subject is the sub‐
127 ject of the server's certificate, while vo is the name of the VO that
128 owns the server. The default filenames are /etc/vomses and
129 $HOME/.voms/vomses.
130 Moreover, permissions must be 644 if a file is specified, and 755 if a
133 directory is specified
134 The three options are synonyms. -confile and -userconf are deprecated.
137 -vomses should be used instead.
138 -policy The file containing the policy expression.
141 -policy-language pl
144 -pl pl The language in which the policy is expressed. Default is IMPER‐
147 SONATION_PROXY.
148 -path-length Maximum depth of proxy certfificate that can be signed
151 from this.
152 -globus version Underlying Globus version. This will influence the de‐
155 fault value of the -proxyver.
156 -proxyver Version of the proxy certificate to create. May be 2, 3 or 4.
159 Default value is decided upon underlying globus version.
160 -rfc This option is a synonym of -proxyver 4 and it generates a
163 RFC-compliant proxy.
164 -old This option is a synonym of -proxyver 2 and it generates a legacy
167 proxy.
168 -target hostname This option targets the generated AC to a specific
171 host. This option may be specified multiple times to allow for multiple
172 hosts.
173 -timeout seconds This option allows to specify the maximum number of
176 seconds that voms-proxy-init will wait while trying to establish a con‐
177 nection with the server. Its default value is -1 (unlimited).
178 -noregen Use existing proxy to contact the server and to sing the new
181 proxy.
182 -separate file Saves the voms credential on file file.
185 -ignorewarn Ignore all warnings. They are not shown to the user.
188 -failonwarn Warnings become failures. The program will translates all
191 warnings into errors and will react accordingly, by returning a failure
192 itself.
193 -list Instead of producing an attribute certificate, this optin will
196 print on screen a list of all attributes available to the user.
197 -includeac file Adds the VOMS AC in file to the proxy.
200
203 EGEE Bug Tracking Tool: https://savannah.cern.ch/projects/jra1mdw/
204
207 voms-proxy-info(1), voms-proxy-destroy(1)
208 EDT Auth Home page: http://grid-auth.infn.it
211 CVSweb: http://datagrid.in2p3.fr/cgi-bin/cvsweb.cgi/Auth/voms
214 RPM repository: http://datagrid.in2p3.fr/distribution/auto‐
217 build/i386-rh7.3
218
221 Vincenzo Ciaschini <Vincenzo.Ciaschini@cnaf.infn.it>.
222 Valerio Venturi <Valerio.Venturi@cnaf.infn.it>.
225
228 Copyright (c) Members of the EGEE Collaboration. 2004. See the benefi‐
229 ciaries list for details on the copyright holders.
230 Licensed under the Apache License, Version 2.0 (the "License"); you may
233 not use this file except in compliance with the License. You may obtain
234 a copy of the License at
235 www.apache.org/licenses/LICENSE-2.0: http://www.apache.org/licenses/LI‐
238 CENSE-2.0
239 Unless required by applicable law or agreed to in writing, software
242 distributed under the License is distributed on an "AS IS" BASIS, WITH‐
243 OUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
244 See the License for the specific language governing permissions and
245 limitations under the License.
246 VOMS-PROXY-INIT(1)